Page 1 of 1

Prevent DNS Rebind Attacks in New Firmware

Posted: Sat May 09, 2015 9:32 pm
by Robertoakley2
Hi,

Almost all routers are open to this form of attack

http://youtu.be/0duYxPIx8gU

Would it be possible to focus on router security and assure us that a default rule is put in place to prevent these sorts of attacks?

Re: Prevent DNS Rebind Attacks in New Firmware

Posted: Mon May 11, 2015 10:38 am
by billion_fan
Robertoakley2 wrote:Hi,

Almost all routers are open to this form of attack

http://youtu.be/0duYxPIx8gU

Would it be possible to focus on router security and assure us that a default rule is put in place to prevent these sorts of attacks?
Checking with our engineers now

Re: Prevent DNS Rebind Attacks in New Firmware

Posted: Wed May 20, 2015 7:53 pm
by Robertoakley2
billion_fan wrote:
Robertoakley2 wrote:Hi,

Almost all routers are open to this form of attack

http://youtu.be/0duYxPIx8gU

Would it be possible to focus on router security and assure us that a default rule is put in place to prevent these sorts of attacks?
Checking with our engineers now
Any update on this?

Also the USB vulnerability. Does it affect Billion routers?

Re: Prevent DNS Rebind Attacks in New Firmware

Posted: Thu May 21, 2015 1:37 pm
by billion_fan
Robertoakley2 wrote:
billion_fan wrote:
Robertoakley2 wrote:Hi,

Almost all routers are open to this form of attack

http://youtu.be/0duYxPIx8gU

Would it be possible to focus on router security and assure us that a default rule is put in place to prevent these sorts of attacks?
Checking with our engineers now
Any update on this?

Also the USB vulnerability. Does it affect Billion routers?
What USB vulnerability are talking about??

Re: Prevent DNS Rebind Attacks in New Firmware

Posted: Thu May 21, 2015 2:27 pm
by billion_fan
billion_fan wrote:
Robertoakley2 wrote:Hi,

Almost all routers are open to this form of attack

http://youtu.be/0duYxPIx8gU

Would it be possible to focus on router security and assure us that a default rule is put in place to prevent these sorts of attacks?
Checking with our engineers now
Our engineers have checked it and the 7800 series seems unaffected (7800dx was tested with the following link http://www.dslreports.com/forum/r188037 ... ng-attacks)

Things to do to make sure you are not attacked (better safe then sorry I would suggest) and you should be fine

1. Change the router admin password
2. Use open DNS servers eg 208.67.222.222 and 208.67.220.220

Re: Prevent DNS Rebind Attacks in New Firmware

Posted: Thu May 21, 2015 7:15 pm
by Robertoakley2
This is the USB vulnerability

http://m.slashdot.org/story/276235

Re: Prevent DNS Rebind Attacks in New Firmware

Posted: Fri May 22, 2015 9:25 am
by billion_fan
Robertoakley2 wrote:This is the USB vulnerability

http://m.slashdot.org/story/276235
Checking with our engineers

Re: Prevent DNS Rebind Attacks in New Firmware

Posted: Sat May 23, 2015 4:20 am
by tongclub62
Great. thank for sharing. ;)

Re: Prevent DNS Rebind Attacks in New Firmware

Posted: Sat May 23, 2015 9:28 am
by Robertoakley2
No problem. It's nice to find a company like yours that cares about security and listens to its customers.

Re: Prevent DNS Rebind Attacks in New Firmware

Posted: Tue May 26, 2015 9:57 am
by billion_fan
Robertoakley2 wrote:No problem. It's nice to find a company like yours that cares about security and listens to its customers.
Just got a reply from Broadcom, see below

"Broadcom reference software does not include any drivers from KCodes"

So we shouldn't be effected